Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa
File: q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa (raw, json)
Hash identifier: Gog+17gwzclnNwGlh4/AMdyY5c+5OZ3UEQLglik+gVw=
Subject key identifier: AB:EA:C4:32:BC:DC:08:B2:92:54:2D:01:06:41:47:E8:F1:0E:CD:D5
Certificate issuer: /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial: 0194258F755B9967B7B0117CD36E461B1540
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 193.24.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:75:5b:99:67:b7:b0:11:7c:d3:6e:46:1b:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abeac432bcdc08b292542d01064147e8f10ecdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:7c:90:ab:63:f3:e1:fc:80:01:d3:8d:ec:
94:c5:30:7b:df:ab:ef:ee:56:37:d7:bd:f1:89:5c:
6c:42:4a:4a:71:25:b7:26:06:7c:d3:c5:cc:e5:e4:
a7:10:61:ab:06:cf:da:f5:3b:a0:eb:db:94:8a:a1:
4f:b7:c4:5a:db:1f:ff:46:ef:27:ab:ed:ea:0d:34:
c7:35:2d:79:b6:c9:0b:f2:db:b9:74:0e:64:6b:65:
12:0a:2d:d9:b7:cc:14:96:bc:28:11:0f:0e:57:ad:
7c:30:bd:9a:df:28:9e:28:b8:70:9c:60:76:6c:e9:
a1:3f:e7:cf:eb:91:61:f3:ff:92:11:34:26:61:57:
a3:b1:ca:96:a6:41:ff:ac:5e:29:b9:89:a1:a5:dd:
1a:e6:12:19:9f:e9:97:a7:3e:a4:43:87:07:6c:f5:
03:17:8d:49:18:21:74:2f:43:da:75:c1:7b:1c:a5:
b5:82:f7:ee:2f:4c:e8:87:aa:ee:1f:d0:43:4c:9d:
8e:f6:9e:25:fb:df:48:bb:2e:d5:a9:c8:9b:eb:2d:
58:e6:9d:4a:d6:8d:61:13:f8:5b:0a:7d:f9:ac:73:
77:f0:85:bb:e6:d9:c5:e7:47:fd:7b:08:8e:01:ad:
c4:db:8d:9e:1b:f3:d1:c1:81:c0:a1:03:58:1b:3d:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:C4:32:BC:DC:08:B2:92:54:2D:01:06:41:47:E8:F1:0E:CD:D5
X509v3 Authority Key Identifier:
keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.44.0/24
Signature Algorithm: sha256WithRSAEncryption
02:83:7d:07:63:b7:84:63:2a:4f:57:e3:80:e2:1a:d0:f5:37:
ac:cd:b5:9f:17:25:a3:01:6e:5a:11:a1:a6:25:2e:cb:38:c5:
54:8c:06:7d:d5:ee:57:ca:45:2d:c9:c3:d2:73:32:4c:d3:ac:
f1:4d:f1:92:8b:8f:d4:ae:8c:46:e9:a1:32:49:98:22:e3:91:
84:7d:96:6a:8a:16:14:d6:42:de:07:76:b2:98:89:2d:7d:1b:
9f:f7:09:54:f5:fc:e7:ef:ab:aa:24:4d:bd:79:55:41:94:ad:
73:f1:2f:2b:ab:2e:24:ee:0a:89:07:a6:f8:c7:9c:c0:dd:a4:
d8:da:07:2e:dc:ca:6d:6c:54:b9:5a:8b:44:2a:9f:cc:6f:69:
f0:b6:3e:06:7a:1c:a4:02:86:c4:67:28:df:c4:35:05:c0:0d:
f2:15:5a:fb:eb:e3:d4:43:49:47:1d:05:29:c6:da:6f:f7:3a:
8e:59:94:c3:5b:97:55:b6:d2:29:ba:dc:44:e8:f9:d4:33:4b:
b1:bf:60:72:88:c5:9b:d1:25:04:1f:8a:45:9f:3d:7d:52:80:
b8:b8:12:4a:8b:ef:5a:b8:d7:b4:2f:f8:be:ed:1d:d7:da:e6:
d5:61:0b:d4:27:65:d4:c1:f5:92:e1:c9:fa:de:31:86:2e:6f:
4f:6b:45:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj3VbmWe3sBF8025GGxVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzU4MDc2OWQ1MjFjODljYzc5N2ZmNjk5Y2FjZjBiYTQz
ZGE5YmYwHhcNMjUwMTAyMDU0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmVhYzQzMmJjZGMwOGIyOTI1NDJkMDEwNjQxNDdlOGYxMGVjZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6t8kKtj8+H8gAHTjeyUxTB736vv
7lY3173xiVxsQkpKcSW3JgZ808XM5eSnEGGrBs/a9Tug69uUiqFPt8Ra2x//Ru8n
q+3qDTTHNS15tskL8tu5dA5ka2USCi3Zt8wUlrwoEQ8OV618ML2a3yieKLhwnGB2
bOmhP+fP65Fh8/+SETQmYVejscqWpkH/rF4puYmhpd0a5hIZn+mXpz6kQ4cHbPUD
F41JGCF0L0PadcF7HKW1gvfuL0zoh6ruH9BDTJ2O9p4l+99Iuy7Vqcib6y1Y5p1K
1o1hE/hbCn35rHN38IW75tnF50f9ewiOAa3E242eG/PRwYHAoQNYGz0m8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvqxDK83AiyklQtAQZBR+jxDs3VMB8GA1UdIwQY
MBaAFHjFgHadUhyJzHl/9pnKzwukPam/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85MWUxNTAtZDdiNS00MTNhLTgzZjct
N2YzZWI4ZjQ4OTVmLzEvcS1yRU1yemNDTEtTVkMwQkJrRkg2UEVPemRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85MWUxNTAtZDdiNS00MTNhLTgzZjctN2YzZWI4ZjQ4OTVm
LzEvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRgsMA0G
CSqGSIb3DQEBCwUAA4IBAQACg30HY7eEYypPV+OA4hrQ9TeszbWfFyWjAW5aEaGm
JS7LOMVUjAZ91e5XykUtycPSczJM06zxTfGSi4/UroxG6aEySZgi45GEfZZqihYU
1kLeB3aymIktfRuf9wlU9fzn76uqJE29eVVBlK1z8S8rqy4k7gqJB6b4x5zA3aTY
2gcu3MptbFS5WotEKp/Mb2nwtj4GehykAobEZyjfxDUFwA3yFVr76+PUQ0lHHQUp
xtpv9zqOWZTDW5dVttIputxE6PnUM0uxv2ByiMWb0SUEH4pFnz19UoC4uBJKi+9a
uNe0L/i+7R3X2ubVYQvUJ2XUwfWS4cn63jGGLm9Pa0Vm
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:39 2025 by rpki-client